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Abstract. In 1972, Serre showed that the adehc Galois representation associated to a non-CM 
eUiptic curve over a number field has open image in GL2(Z). In [GrelO\ Greicius develops necessary 
and suflicient criteria for determining when this representation is actually surjective and exhibits 
such an example. However, verifying these criteria turns out to be difficult in practice; Greicius 
describes tests for them that apply only to semistable elliptic curves over a specific class of cubic 
number fields. In this paper, we extend Greicius' methods in several directions. First, we consider 
the analogous problem for elliptic curves with full 2-torsion. Following Greicius, we obtain necessary 
and sufficient conditions for the associated adelic representation to be maximal and also develop a 
battery of computationally effective tests that can be used to verify these conditions. We are able 
to use our tests to construct an infinite family of curves over Q(q) with maximal image, where a is 
the real root of a;'^ + x + 1. Next, we extend Greicius' tests to more general settings, such as non- 
semistable elliptic curves over arbitrary cubic number fields. Finally, we give a general discussion 
concerning such problems for arbitrary torsion subgroups. 



1. Introduction and Statement of Results 

Let E be an elliptic curve over a number field K. For m a positive integer, let E[m] denote the 
group of m-torsion points of E over K. It is well known that E[m] ~ Z/mZ x Z/mZ, and since 
[m] is defined over K the Galois group Gk '■= Gal{K/K) acts on £"[771]. This can be phrased as a 
Galois representation 

PE,m ■■ Gk ^ GL2(Z/mZ). 
We call this the "mod m" Galois representation. Now fix a prime £. Taking the inverse limit over 
powers of i, we obtain the Tate module of E, 

Ti{E) := ^Z/rZ 

Correspondingly, we have the "^-adic" Galois representation 

Pe/^ : Gk GL2{'Ze)- 

Taking the product of these over all primes, we finally obtain the "adelic" Galois representation 

Pe: Gk ^GL2{Z). 

In |Ser72j . Serre famously proved that for elliptic curves without complex multiplication, the 
image of pE is always open in GL2(Z). In particular, this implies that PE,i°° is surjective for all 
sufficiently large i. He also showed that for an elliptic curve defined over Q, pE is never surjective. 

Naturally, this raised the question of whether pE could be surjective for elliptic curves defined 
over number fields other than Q. In [GrelOj . Greicius proves necessary and sufficient abstract 
criteria for pe{Gk) to be the full group GL2(Z). He then develops numerical tests applying to 
semistable elliptic curves over the field Q(a), where a is the real root of + x + 1 = 0, which can 
be effectively used to verify these criteria. Through the tests he is able to give the first explicit 
example of an elliptic curve over a number field with surjective adelic Galois representation. In 
doing so, the main challenge is to show that the £-adic representation is surjective for all (.. 

Despite the difficulty of finding explicit examples of surjective adelic representations, it turns 
out that much is known on average. Zywina, building on work of Duke and Jones in [Duk97j and 
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[JonlOj . proved that almost all (in the sense of density) elliptic curves have surjective adelic Galois 
representation ( [ZywlOa ZywlObj ). In fact, his work shows that for any rational family of elliptic 



curves, even when there are obstructions to the surjectivity oi pE such as the presence of torsion 
defined over K, the generic member has maximal Galois representation. However, his methods are 
ineffective in that they do not explicitly produce any such elliptic curves. 

In this paper, we first consider the question of determining the image of Galois for explicit elliptic 
curves under certain hypotheses of torsion. More specifically, let E/K be an elliptic curve with full 
2-torsion over K, so that E[2]{K) = Z/2Z x Z/2Z. Then the action of Gr on E[2] is trivial, so the 
image of the 2-adic Galois representation 

Gk GL2(Z2) 

lies in the kernel of the reduction mod 2 map. In this case the adelic Galois representation clearly 
cannot be surjective. Writing = / + Mat2x2(^£), the remarks above imply that pE factors 

through the map 

Pe: GA'^yi(2) X J]GL2(Z,). 

Following Greicius, we first prove necessary and sufficient abstract criteria, analogous to Theorem 
3.1 in [GrelOj . for the adelic Galois representation to be maximal given that the elliptic curve has 
full two-torsion over its field of definition, K. 

Theorem 1.1. Let K he a number field. We have that pE surjects onto Vi(2) x P3£^2GL2(Z£) if 
and only if the following three conditions are satisfied: 

(1) pE,i°° is surjective for each i >3 and pE,2°° surjects onto Vi{2), 

(2) K{E[A])r\K^y^ = K{i), 

(3) KnQ^'y'' = Q. 

Remark. Note that the third condition cannot be satisfied when K is an abelian extension of Q, so 
the simplest number field K where this can be satisfied is a non-Galois cubic extensions. 

This theorem is not hard to prove; it is more difficult to test algorithmically if the first two 
conditions above are satisfied. In the case where K is the number field that Greicius considers, the 
first condition can be checked using his methods for most i, but the case of the 2-adic representation 
is significantly different, as there is no GL2(Z/2Z)-module structure on the image. In Section [2.3^ 
we develop new methods for handling this case. The second condition is also unique to the two- 
torsion case, and requires some work to obtain a feasible computation. Using the tests developed 
by Greicius, as well as the ones mentioned above, we implemented a computer program to check 
maximality of adelic representations. Simply iterating through coefficients, we found the following 
curve which has maximal adelic image. 

Example 1.2. Let K = Q(a), where a is the real root of x'^ + x + 1. Let 

E/K: / = x{x - {2a^ + la + 19))(x - (18a^ + 7a + 3)). 

Then pE surjects onto Vi{2) x J3^^2 GL2(Z^). 

Not only can our tests be used to check that specific elliptic curves have maximal adelic Galois 
representation, they can also be used to explicitly construct infinite families of such curves. This 
is done in Section [3l and we obtain the following result. 

Theorem 1.3. Let K = Q{a), with a as above. Let M : = 2^ • 3- 5 • 7- 11 • 13- 17- 29 -31 •47- 787- 827 

and 

Eb^c/K: = x{x - {a^ + ba + c)){x - 16(a^ + a + 1)). 
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IfbjC^Z satisfy 

6 = 17 • 37 • 257 • 509^ • 787 • 827 (mod M) 
c = 2^ • 17 • 787 • 827 • 4657 • 15649 (mod M), 
then the adelic representation pEtc surjects onto Vi(2) x J3^^2 GL2(Z£). 

As mentioned, Greicius's tests depend upon special properties of the E and K: they apply only to 
semistable elliptic curves with non- integral j-invariant, and also only to cubic fields K with trivial 
narrow class group and possessing a totally positive unit u such that n — 1 is also a unit. More 
precisely, Greicius uses these conditions to prove that all primes i failing condition 1 of Theorem 
11.11 outside an easily computable finite set, satisfy a certain divisibility condition relating to the 
reduction of E at primes of good reduction. In Section [H we prove analogous results applying to 
all elliptic curves with non-integral j-invariant over arbitrary cubic number fields. 

Using them, we obtain the following examples. First, we give an example of a non-Galois cubic 
field K and an elliptic curve E/K with full 2-torsion over K which has maximal adelic Galois 
image, but is not semistable. 

Example 1.4. Let (3 be the unique real root of + 4x^ + 7x — 4 and K = Q(/3). The adelic 
representation pE associated to the elliptic curve 

E/K: = x{x + (10/3^ - 3))(x - (/? + 4)) 

surjects onto Vi{2) x P3^^2 GL2(Z^). 

Lastly, we give an example of non-galois cubic field K with nontrivial narrow class group and a 
semistable elliptic curve E/K with surjective adelic representation. 

Example 1.5. Let (3 he the unique real root of x^ + Sx^ — 3x + 1 and K = Q(/3). Then the adelic 
representation pE corresponding to 

E/K : +xy + I3y = x^ - 8x^ - 6x - 1 

surjects onto GL2(Z). 

While we focus on two-torsion in the paper, our tests may be easily generalized to higher torsion. 
In the final section, we discuss how to compute the ^-adic image in the presence of ^-torsion. As 
a demonstration, we compute the 7-adic Galois representation for an elliptic curve over Q with a 
single cycle of 7-torsion points over Q. In this case, the maximum possible image of Galois is the 
pre-image of the "half-Borel" subgroup 

under the projection GL2(Z) — )■ GL2(F7). 
Example 1.6. Let 

E/Q: y^ + xy + y = x^ -x^ - 19353x + 958713, 
which has torsion subgroup 'L/ITL over Q. Then E has maximal adelic image. 

The computations in this paper were done using Magma and Sage. Throughout this paper, 
we include references to the code that we have written. We indicate this by using the typewriter 
font. These scripts along with their outputs are available at |CFLTLj . 

2. The Criteria 
We begin with the proof of Theorem 11.11 
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2.1. Proof of Theorem 11.11 Throughout, we will assume that our elliptic curves have full 2- 
torsion over A', i.e., the mod 2 image of the representation is trivial. As mentioned in the intro- 
duction, 

Pe{Gk)(1Vi{2) X []GL2(Z,). 

Let 

G:=Vi{2) X J]GL2(Z,). 

l>2 

In this section we develop a criterion for proving that the Galois representation of an elliptic curve 
with full 2-torsion surjects onto G. 

Our approach is modeled on that in [GrelOj , in which the author proves a criterion for an elliptic 
curve to have surjective adelic Galois representation and then uses it to compute the first known 
example of such a curve. To do so, he first develops a fairly abstract criterion for a subgroup of 
a product of profinite groups to be the whole group, and then interprets it in the case of a Galois 
representation associated to an elliptic curve. We summarize this result in the following lemma. 

Lemma 2.1 ( [GrelOj . Lemma 2.2 and Proposition 2.5). Let Ga be a collection of profinite groups 
such that for a ^ a' , we have Quo(Ga) n Quo(Gq') = 0, where Quo(Ga) denotes the set of 
isomorphism classes of finite, nonabelian simple quotients of Ga- If H G = Yl^^a is a closed 
subgroup that surjects onto each Ga and surjects onto G^^, then H = G. 

Applying this to our situation, we know that 

Pe{Gk) ^Vi{2) xllGL2{Ze) 

is a closed subgroup. The condition on Quo(Ga) is easily satisfied; we are in the same situation as 
Corollary 2.7 of [ GrelOj . except now we have replaced GL2(Z2) with Vi{2). In fact, Quo(Vi(2)) = 0, 
as Vi{2) is a pro-2 group, so the condition is still satisfied. Therefore, in order to show that pe{Gk) 
is the entire group, we must show the Pe/°° is surjective for 1^2, that pe{Gk) surjects onto Vi(2), 
and that pe{Gk) surjects onto the abelianization of Vi{2) x nf>2 GL2(Z^). 

In order to check the first two conditions, we apply the following two lemmas which are known 
as the Refinement Lemmas. 

Lemma 2.2 ( |LT76j . p. 47). Let U C Vi{i) be a closed subgroup. Then the following are true. 

(1) If 1 = 2 and U surjects onto Vi{l)/Vz{l), then U = Vi{l). 

(2) Ifi is odd, and U surjects onto Vi{£)/V2{i), then U = V^. 

Lemma 2.3 ( [Ser98j . IV-23). Let i > 5. Suppose H C SL2(Z^) is a closed subgroup that surjects 
onto SL2(F^). Then H = SLsCZ^). 

Corollary 2.4. Suppose that K n Q'^^'^ = Q, and suppose the following conditions are satisfied: 

(1) pe,2°°{Gk) surjects onto yi(2)/y3(2). 

(2) Pe,9{Gk) is surjective. 

(3) Pe,i{Gk) is surjective for all £ > 3. 

Then pE,2°° surjects onto Vi{2), and pE,e°^ is surjective for all odd L 

Proof. The surjectivity for the 2-adic and 3-adic representations follows from the two parts of 
Lemma [221 respectively. 

Furthermore, if we assume that K n Q'^^^ = Q, then, by the non-degeneracy of the Weil pairing, 
the determinant map is surjective. The hypothesis in our corollary implies that Pe,i{Gk) contains 
SL2(F£), so Pe,i^{Gk) contains SL2(Z£). As the determinant is surjective, this implies that pE,e°° 
is surjective. □ 
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In order to show that pe{Gk) surjects onto the abehanization, we must compute the abehaniza- 
tion of Vi(2) X n£>2 GL2(Z£). Equivalently, we wish to compute its commutator subgroup. We note 
that we only need to do this for each £ separately. For any group G, we denote the commutator 
subgroup of G by G' . We recall the computation for H. odd. 

Lemma 2.5 r |LT76| . p. 95 and 183). Let £ be odd. Then GL2(Z^)' = SL2(Z^). 

The only task then is to compute 14(2)'. 

Lemma 2.6. We have Vi{2y = ^2(2) n SL2(Z2). 

Proof. As Vi(2)/V2(2) is abelian, we know the commutator is contained in V2(2). As usual, we 
know that SL2(Z2) contains the commutator, so we have an inclusion above in one direction. We 
write Ukii) = Vfc(^) n SL2(Z^). 

First, we would like to show that modulo 8, the image of Vi(2)' contains C/2(2). In other words, 
we would like to compute the commutator of yi(2)/V3(2). 

We note that 




Transposing the first, we get the matrix (gi)- These three matrices generate U2{2)/U3(2), so 
we know that this is the commutator of Vi(2)/V3(2), and this means that Vi(2)' surjects onto 
t/2(2)/C/3(2). 

Suppose that Vi{2y surjects onto Uk-i{2)/Uk{2). Note that Uk{l) = I + £''5l2{1e), where 5l2 
is the set of 2 x 2 matrices with trace 0. We know that Vi(2)' contains all matrices of the form 
1 + 2'^~^A, as A runs over the matrices of trace zero modulo 2. In general, if /c > 2 or £ > 3, we 
know that (1 + £^A)^ = 1 + i^^^A (mod &^'^), and this only depends on A modulo L It follows 
that Vi{2)' also surjects onto Uk{2) /Uk+i{2). Since we know that Vi(2)' surjects onto C/2(2)/C/3(2), 
we know that it surjects onto Uk{2) /Uk+i{2) for all k > 2. Thus Vi(2)' surjects onto U2{2)/Uk{2), 
and since ^i(2)' is closed, it must be all of U2{2). □ 

So we see that the abehanization map of G is the product pE,4 x det, and its image is the index 
two subgroup of V2/V4 x Z* where det (on the first factor) and reduction mod 2 (on the second 
factor) agree. 

We would like to interpret surjectivity onto G^^ in a field-theoretic manner. As we noted, showing 
that the determinant map is surjective is a matter of requiring that K n Q'^^"^ = Q. In order for 
Pe{Gk) to surject onto G^^ in our case, we need the following: 

Proposition 2.7. The group pe{Gk) surjects onto G'^^ if and only if K n Q'^^'^ = Q, [-fC(ii^[4]) : 
K] = 16, and K{E[4\) n K'^y'^ = K{i). 

Proof. We have already remarked that K n Q'^^'^ = Q is equivalent to the surjectivity of the deter- 
minant map. 

Observe that K{E[A]) is the fixed field of pe,2°°{Gk) n (/ + 4^1(2)). Furthermore, KiEl^]) n 
j{cyc ^ K{i) by properties of the Weil pairing. The abehanization map can be restated as the 
product of the quotient maps from Gk to Gal{K {E[4]) / K) and Gal{K'^y'^ / K) given by restriction 
to the respective fields; under this interpretation, the condition is simply that the image of an 
element a £ Gk must agree under the restriction of both factors to K{i). 

We know that if L and M are extensions of K, then Gal{LM/K) is Gal(L/i^) >iGai(LnM)/K 
Gal{M/K), and the result follows. Therefore, if ^^(£"[4]) n K'^y'^ = K{i), then the Galois group 
of the compositum already surjects onto C^^. Conversely, if the intersection is any greater, then 
the map cannot be surjective because its image is constrained to agree on the Galois group of the 
intersection over K, which strictly contains K(i). □ 
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2.2. Checking condition[2l As the second condition of Theorem 11.11 cannot be directly computed, 
we must develop an easier criterion to check. Greicius does not have to do this, as his version of 
the second condition is that K{^/A) n K"^^"^ = K, so all that must be checked is if ^/A G K^^^. 
We avoid working with K{E[4^) directly, as that would be computationally intensive. Instead, we 
develop a test in which we only see if certain elements of K are squares. 

We use the following notation. Let T be a set of numbers. Define Vt to be the set containing all 
products of non-empty subsets of elements of T. For example, if T = {2,3}, then Vt = {2,3,6}. 
We define A to be the discriminant of E. 

Proposition 2.8. Assume that [K{E[A]) : K] = IQ and A' n Q^^^ = Q. Let ^1,^2,^3 he the 
discriminants of the three quadratic factors of the ^-division polynomial. Let d^ = \/A- Let S' 
be the set of prime ideals of K dividing 2 A and S he the primes of Q helow primes in S' . Let 
T = {di, da, 4,^4}. If K{E[A]) n i^^y^ 2 K{i), then there exists s £Vs, t GVt such that t/s is a 
square in K . 

Proof. From p. 81-82 of [AdeOlj . we have that if E is in the form = -|- Ax + B, then 
K{E[A\) = K{x{E[A\)., \/A) = K{-\fdi, Vds, -y/dl)- Our curves are not of that form, but using 
the change of variables from pg. 41 - 43 of [Sil09j . we get that the same result holds for all elliptic 
curves in Weierstrass form. 

Assume that -fC(£^[4]) n K'^y'' = M' D K{i). We have that Gal(i^(^[4])/K) ^ (Z/2Z)4, so there 
exists M with K{i) C M C M' and Gal(M/i^) ^ (Z/2Z)2. The extension M/K has two quadratic 
subextensions in addition to K{i). Let L := K{^/d), where d G Ok is square-free, be one of them. 

As L C choose n such that L C K{nn)- Since RnQ'^y'' = Q, we have that Gal(i^(//„)/K) = 

Gal(Q(//n)/Q). So we may consider Q C L' := Q(^„)Gai{^{/^n)/L) ^ Q(^„). By the fundamental 
theorem of Galois theory, L' C L. So L n Q'^^'^ / Q. This implies that Vd £ Q^'^'', and hence 
d G <Q^y^ n Ok = Z- We may assume that d is positive, as z G M. 

By the criterion of Neron-Ogg-Shafarevich, we have that a prime ideal p C Ok ramifies in 
K{E[4\)/ K only if p G S' . Therefore, we must have that d G Vs- 

Since i^(£'[4]) = K{-\fdi, y^, y/(h, V(U), we have that all quadratic subextensions of K{E[4:])/ K 
are generated by an element of Vt- Therefore, we have that L = K{y/t) for some t G Vt- Now, 
K{yft) = K{y/^) if and only if t/s is a square of K, which completes the proof of our lemma. □ 

2.3. 2-adic surjectivity. We now outline our algorithm for checking that the 2-adic image is the 
full group Vi{2). We assume that the 2-adic image surjects onto Vi(2)/V2(2); this is easily checked 
by, for instance, computing the degree of the field extension K{E[4^)/K. In contrast, computing 
directly the degree of the extension K{E[^])/K is infeasible, as we want examples where this 
extension has degree 256. 

In what follows, let p be a prime of K not dividing 2A, where A is the discriminant of E (so 
that the 2-adic Galois representation is unramified at these primes). Let Ep denote the reduction 
of E at p. Let Frobp denote the Frobenius element at p for the extension K /K. 

Proposition 2.9. Under the hypothesis ahove, the 2-adic Galois representation associated to E has 
maximal image if the following is satisfied: there exists a prime p C Ok such that ^(Ok/p) = 5 
(mod 8) and E (mod p) has full four-torsion over Ok/P- 

Proof. By the Refinement Lemmas ( |LT76j . p. 47), it suffices to show that the 2-adic image surjects 
onto ¥l (2)7^3(2). Since we know that it surjects onto yi(2)/V2(2), the mod 8 image contains an 
element of the form / + 25" + 4T for all 2 x 2 matrices S G Mat2x2(Z/2Z). Squaring, we obtain 



{I + 2S + ATf = I + A{S + S^) (mod 8). 
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Computing this for all such S, we find five distinct matrices: 

^) 

Note that this set generates a subgroup of size 8 in V2(2)/V3(2) consisting of those matrices with 
determinant congruent to 1 (mod 8). Therefore, we immediately see that (under our hypotheses) 
the image of Galois, contains an index two subgroup of V2(3)/V2(3) and hence also Vi{3)/V3{3). 
Moreover, equality is achieved in both cases if and only if the mod 8 image of Galois has an element 
with determinant congruent to 5 (mod 8) in V2(2)/V3(2). 

Since the 8-torsion of E injects into the 8-torsion of Ep, the first condition implies that in some 
basis for E[8], 

PE,4{Ftohp) = I ^ ps,8(Frobp) = I (mod 4) 
but has determinant congruent to 5 (mod 8). □ 

2.4. Proof of Example 11.21 In this section we apply the results of Section [2] and give an example 
of an elliptic curve over K = Q(a) with surjective adelic Galois representation pE- 
Let 

E/K : y2 = x{x - {Ic? + 7a + 19))(a; - (180^ + 7a + 3)). 

We want to show that pE surjects onto Fi(2) x n^>2 GL2(Z^). 

It is clear from the definition of E that E has full 2-torsion over K. As the conductor of E is 
squarefree, E is semistable. We now check that the three conditions of Theorem 11.11 are satisfied. 
Since K = Q(a), it is clear that K n Q'^^'^ = Q. 

As an ideal the discriminant of E is 

(1) (A) = (2)i2(2a2 + 7a + X^fiho? + a + 4)2(a - 3)2(a - 1)^ 

where the ideals on the right hand side of the above equation are prime ideals which lie above 2, 
6857, 167, 31, and 3, respectively. 

Using Magma, one can compute that [_fC(£;[4]) : K\ = 16. We now show that K{E\^) n K''^'' = 
K{i). This will make use of Lemma 12.81 To apply the theorem, we make some computational 
preliminaries to explicitly write out -fC(i?[4]). Note that the division polynomial of E will factor as 
the product of 3 quadratic factors /i, /2, and /s. From Section 5.5 of |Ade01| and the fact that 
[i(r(£J[4]) : K\ = 16, we know that i^(£'[4]) = K{\/di, \/d2, Vds, v^) where di is the discriminant 
of fi. In this case, we have 

di = 36la^ - 22a - 83 

d2 = -2112a2 - 2048a - 640 

ds = -372a2 + 1976a + 1552. 

We also have that 

d4 := Va = 2^a^(2a2 + 7a + 19)(18a2 + 7a + 3)(a - 1). 
In the notation of Lemma [2^81 we have S = {2, 3, 31, 167, 6857} and T = {\'^}f^i. Let 

Si = {2^i3^2 3ir3;L67^4g857r-5 ; ^. = q or 1}\{1} 

and 

Ti = {d'l'd'^'dl^dl^ : Si = or 1}\{1}. 

Lemma [2 . 8 1 implies that if for all possible pairs of /3 G Si and 7 G Ti if 7//? is not a square in K, then 
K(£'[4]) n K'^y^ = K{i). Writing a script in MAGMA iterating through all 465 pairs of (/?, 7) yields 
that this condition is indeed satisfied (see exl2_sq.txt and the corresponding exl2_sq_res .txt in 
[(^FLTLQ . Therefore we have K{E[4]) n K'^^'^ = K(i). 
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Let H := pe{Gk)- Denote by the image of H under vr^ : i/ — )• GL2(Z^), and similarly denote 
by the image of H under ri : H ^ GL2(Z/«). Since [K{E[i]) : K] = 16, the mod 4 image 
H(4) is maximal. This and the fact that K {E[4\) D K^^^ = K{i) imply that the abehanization map 
is surjective. We will also need this fact in proving that pE,2°° is surjective. 

We now verify the first condition in Theorem 11.11 That is, Hi = GL2(Z£) for I > 3 and 
H2 = Vi{2). The ideal generated by the j-invariant of E is 

_ (g^ - 6a + 3f{3a^ - 5a + l)^(5a^ + 2a + 6)^ 
~ (5a2 + a + 4)2(a - l)2(a - 3)2(2a2 + 7a + 19)2 ' 

Equation ([T|) gives the primes of bad reduction. For all primes of bad reduction which are not the 
ideal (2), we have v[jE) = —2. To show that Hi = GL2(Z^) for all ^ 7^ 2, 3, 31, we will make use of 
a combination of Proposition 3.5, Corollary 3.8, and Remark 3.9 in [GrelOj which we state below: 

Proposition 2.10. Let K he a number field with a real embedding and a trivial narrow class group 
and satisfying K D Q'^^'^ = Q. Let E/K be a semistahle elliptic curve with j-invariant Je- Suppose 
i is a prime unramified in K. If i = 2, 3, 5, suppose further that £ \ v{jE) for some v corresponding 
to a prime of bad reduction of E. If H{i) ^ GL2(F£), given any place v' not of bad reduction, we 
have i I ^Eyi{kyi) where Eyi[kyi) is the reduction of E over the residue field corresponding to v' . 

Fix an £ 7^ 2,31. Assume that H{t) ^ GL2(F£). Let v be the prime ideal (1 — 2a) which lies 
over 13. Then ^E^{ky) = 16 and hence by Proposition 12.101 £ | 16. Since i is prime, we must have 
£ = 2, a contradiction. Therefore H{() = GL2(Ff) for ah £ / 2, 31. 

We now use the following result which is a corollary of Lemma 12.31 

Proposition 2.11 ( [GrelO] . Corollary 2.13 (iii)). Let K C GL2{'Ze) be a closed subgroup. If £ > 5, 
K GL2(F£) and det{K) = Z*, then K = GL2(Z£). 

For ^ 7^ 2, 3, 31, the previous proposition and the surjectivity of det \h imply that Hi = GL2(Z£) 
for all £ 7^ 2, 3, 31. It now remains to show the last 3 cases. 

Consider the £ = 31 case. This case will make use of the following proposition. 

Proposition 2.12 ( [Ser72j . Proposition 19). Let £ > "o and suppose K C GL2(F^) is a subgroup 
satisfying 

(i) K contains elements si and S2 such that ^ *''(^') -4det(sJ ^ _ ^^^^ tr(sj) 7^ 0. 

(ii) K contains an element t such that u = tr(t)2/ det(t) ^ 0, 1, 2, 4 (mod £) and — 3u + 1 ^ 
(mod £). 

Then K contains SL2(F^). In particular, if det : X — )• F| is surjective, then K = G\j2{^l)- 

We compute the following table. By ty and N^, we mean the trace of the Frobenius corresponding 
to V and the cardinality of the residue field corresponding to v. 



V 


tl - 4iV2 (j^od 


u = tl/Ny (mod 31) 


u'^ -3u + l (mod 31) 


Pii = (a - 2) 


3 


24 


9 


qii = (— 5a^ + a — 3) 


17 


19 


26 


qi3 = (-2a + 1) 


14 


17 


22 



Let si := pe, 3i{Ficohwi) for any fixed wi \ pn, S2 ■= pE,3i(Picohw2) for any fixed W2 \ qi3, and 
t := p_E,3i(Frobt„3) for any fixed W3 \ qn. In Proposition 12.121 take K := H{31). By the above 
table and Proposition I2.12"| H{31) contains SL2(F3i). Since det : ^^^(31) — t- Fg^^ is surjective, we 
have H{31) = GL2(F3i). Then by Proposition [MH H31 = GL2(Z3i). 

Now consider the £ = 3 case. Consider the prime ideal q29 := (3a^ + 2) which lies over 29 and 
let vr G H3 be p£;^3(Frob^) for any w \ ^29- Then for v = q29, Ny = 29 and ty = 6 and hence the 
characteristic polynomial of tt is - 6i + 29 = (t - 7){t - 8) (mod 9). The rest of the computation 
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for this case remains exactly the same as the £ = 3 case considered by Greicius in |GrelO| . Therefore 
H-s = GL2(Z3). 

Finally we consider the £ = 2 case. Recall that since [/C(i?[4]) : K] = 16, H{4), the mod 4 image 
is maximal. We will now use Proposition 12.91 Letting p := (157) in the proposition gives that 
^{Ok/p) = 3869893 = 5 (mod 8). Computation in Sage shows that E has full four-torsion over 
Ok/P- This verifies that H2 = Vi{2). 

The three conditions of Theorem 11.11 are now verified as desired. 

Remark. We have written code in Sage that automates the checking we did above and gives the 
prime ideals that one needs to satisfying the given conditions (see check_sage . sws in [CFLTLj ). 

3. Constructing an Infinite Family 

Fix K = Q{a) where a is the real root oi + x + 1. In this section, we apply our criteria to 
obtain an infinite family of elliptic curves with maximal adelic image given full two-torsion over 
K. To do so, we obtain families of curves satisfying each of the requisite conditions: 

(i) semistability, 

(ii) KiEli]) n = K{i), and 

(iii) maximal ^-adic image for each prime i. 

We are able to find congruence conditions on the coefficients of our elliptic curves ensuring each 
of these conditions, which we may then piece together using the Chinese remainder theorem. 
Throughout this section, with 6, c G Z, let -Ef^c be the elliptic curve defined by 

Eb^c/K : = x{x - (a^ + ba + c)){x - 16(a^ + a + 1)). 

3.1. A family of semistable elliptic curves. Since the criteria we use for verifying maximality 
apply only to semistable curves, we must first find infinite families of semistable elliptic curves of 
the desired form. Such a family is furnished by the following proposition. 

Proposition 3.1. Suppose that one of the following two conditions is satisfied: 

(i) 6 = 5 (mod 12) and c = 4 or 8 (mod 12). 
(ii) 6 = 9 (mod 12) and c = 4 (mod 12). 

Then 

E/K : = x{x - {a^ + ba + c)){x - 16(a^ + a + I)) 

is semistable. 

Proof. Since Ok is a unique factorization domain, we will speak freely of primes of K as numbers. 
We establish the result for case (i). The proof for case (ii) is identical. 

Let A = a'^ + ba + c, B = 16(1 + a + a^), and C = A — B. We first claim that A and B are 
coprime in K. Since -|- a -|- 1 = 0, 1 + a -\- a"^ = — = a^(l — a). Moreover, a is a unit. 
Furthermore, Nx/q{1 — a) = /(I) = 3. So 1 -|- a -|- is a prime lying over 3. 

We also easily check that 2 is inert in K. Hence it suffices to prove that A is coprime to 2 and 
1 — a. The former is clear. For the latter, observe that 

A = a'^ + ba + c = 1-1-6-1-c (mod 1 — a). 

But 6 = 2 (mod 3) and c = 1 or 2 (mod 3),sol + 6-|-c^0 (mod 3). 

So we see that A and B are coprime, hence {A,B,C} are pairwise coprime. Now we note that 
for this Weierstrass form, 

A = lQ{ABCf and C4 = IdiA^ - AB + B^) 



10 DAVID CORWIN, TONY FENG, ZANE KUN LI, SARAH TREBAT-LEDER 

If p 7^ (2) is a prime dividing A, then it divides exactly one of A, B, C. Supposing that p \ A, we see 
that C4 = 16B^ ^ (mod p), so E is not semistable at p. Similarly, if p | i? the curve is semistable 
at p. Finally, if p \ C = A - B, then 

C4 = 16{A'^ -AB + B^) = 16A'^ ^ (mod p). 

The only prime left to consider is p = (2). Making the change of variables {x, y) i— )• {Ax, 8y + 4a^x), 
and noting that = —a{a + 1), we obtain the Weierstrass equation 

2 2 s -A - B + a(a + l) o AB 

y + a xy = X H x x. 

4 16 

Since A = a'^ + ba + c, we see that A — a — a'^ is divisible by 4, and hence the coefficients are in 
Ok- For this Weierstrass form, A = {ABCf/16 and a = - AB + B^. Since 2 | S and 2 f ^, 
we see that E is semistable at 2 as well. □ 

3.2. A family with maximal mod 4 image. In this section, fix an elliptic curve Ef,^c- To verify 
maximal 2-adic image, we must first have maximal mod 4 image and then apply Proposition 12.91 
That piiGx) is maximal is equivalent to [i^(i?[4]) : K] = 16. We will describe a procedure that 
may be used to determine congruence conditions on b and c which ensure that E has maximal mod 
4 image. As an example, we prove the following: 

Proposition 3.2. Let 

E/K: y^ = x{x - (a^ + ba + c)){x - 16(a^ + a + 1)), 

where b = 3699 (mod 4991) and c = 4183 (mod 4991). Then pE,i{GK) is maximal. 

We emphasize that the congruence condition given in the proposition is just one of many possi- 
bilities. We begin with a general discussion. Recall that 

K{E[A])=K{xi,X2,X3,VA) 

where xi,X2,X3 are the x-coordinates of 8-torsion point not differing by a 4-torsion point. We may 
take xi,X2,X3 to be the roots of the quadratics 

- 16(6 + c)q^ - 16(c - 2)a - 16(c - 6 - 1) 

x^ - 32{a^ + a + l)x + 16((6 + c)a^ + {c - 2)a + {c - b + 1)) 

x^ + {-2a^ - 2ba - 2c)x + 16(6 + c)a^ + 16(c - 2)a + 16(c - 6 - 1) 

which we obtained by factoring the 4-division polynomial for E, whose discriminants are, respec- 
tively, 

di = 2^((6 + c)a^ + {c-2)a + {c-b- 1)) 
d2 = 2^ (16(1 + a + a^f - ((6 + c)a^ + {c - 2)a + {c - b - 1))) 
= A{a^ + ba + cf - 64((6 + c)a^ + {c - 2)a + {c - b - 1)). 

In addition, 

d4 := \/A = 64(a^ + ba + c){a^ +a + l)(15a^ + (16 - b)a + (16 - c)). 

So 

K{E[A]) = K{^/d[, v^, 

This is a degree 16 extension of K if and only if all 15 of the extensions K{-sfN), where N is the 
product of some non-empty subset of {di, (i2) ^3) c^4}) are nontrivial, or equivalently, if and only if 
all such N are not squares in Ok- 
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So to ensure this, it suffices to find prime ideals Pi,p2jp3ip4 such that for each i = 1,2,3,4, we 
have that di is a non-square in (Ox/pi)^ and dj is a square for j ^ i. If this is the case, then the 
product of any non-empty subset of ^1,^2,(^3, d^ will fail to be a square in 

(Ox/pip2p3p4)^ ^ {Ok /Pi)'' X {Ok /P2)'' x (O^^/ps)^ x {Ok/Pa)"" , 

hence is obviously not a square in Ok- Once ideals satisfying these conditions are found for a 
particular curve 

E : y"^ = x{x - {a^ + ba + c)){x - 16(a^ + a + 1)), 

where b,c £ Ok, then they will work for any curve 

E' ■.y'^ = x{x - (a^ + h' a + c)){x - lQ{o? +a + 1)). 

with 6 = 6' (mod pip2p3p4) and c = c' (mod pip2p3p4)- 

We carried out this program by computer search (see test_primes . sws in [CFLTLj ) . Many 
examples were found, but for brevity we simply list one. 

Proof of Proposition \3.2[ With 6 = 33645 and c = 19156, the prime ideals 

Pi = (a-3), p2 = (7), p3 = (-a2 + 3Q-l), P4 = (a^ + 4a - 3) 

satisfy the desired conditions. These lie over 31, 7, 31, and 23 respectively, so the congruence 
condition is over 7 x 23 x 31 = 4991. □ 

3.3. A family with K{E[4\) n K^^^^ = K{i). In this section, we describe congruence conditions 
on b, c which ensure that E^^c satisfies the field intersection condition 

K{E[4])nK^y^ = K{i). 

Let di,d2,d3, and ^4 be as Section [3.21 Collecting terms together, we find the following expressions. 
(2) 

(ig = (16 + 146 - 16c + c^) + (31 - 16c + 26c - 26)a + (6^ - 166 - 14c - l)a^ := x + ya + za^ 
and 

(3) d4 = -64{a^ + a + l)d3. 

Our key observation is that d/^ can be divisible by only a few rational primes, which limits the 
possible intersection by Lemma 12.81 This is made precise in the proof of the proposition below. 

Proposition 3.3. Assume that 

'(1,1) or (1,2) (mod 3) 

(1,1) (mod 5) 

(2,5) (mod 11) 

(6, c) # <( (4, 5) (mod 17) 
(14, 11) or (23, 6) or (25, 9) (mod 31) 

(467, 91) (mod 787) 

^ (626, 280) (mod 827) 

r6en Eb,c satisfies K{Eb,c['i\) n K'^^' = K{i). 

Proof. Let A^^c denote the discriminant of E^^c- Assume that 6, c are such that A'(£'fe^c[4]) H K'^^'^ 7^ 
K{i). Then by Lemma 12. 8^ we have that K{^/n) = K{y/rn), where n is an integer and m is a 
product of some subset of di, (i2, c?3, ^4. As n and m can only differ by a square of we have that 
some prime of Q divides m, hence some prime p of Q must divide did2d3di. 
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Note that any prime of K dividing di,d2,d3 must ramify in K('\/di)/K, and hence must divide 
Afoc (as we already have that 2 | A^c)- For primes of K not lying above 31, dividing A^^c is 
equivalent to dividing d^. So p \ did2d^d4, implies that either p | ^4 or p = 31 and p \ c- 

Assume that p \ ^4. Then, using ([3]), as + a + 1 is a prime above 3, either p = 2,3, or 
p I ds- If I ds, then we must have that p \ x,y,z (as defined in ([2|)), so p \ CxX + Cy-y + CzZ for 
any c^, Cy, Cz £ Ok- We use Cx = 28, Cy = 8 — 6, = — 2 + 2c to get that p \ 698 + 3776 — 550c. 
We use Cx = -2b + 16, Cy = c - 15, c^ = 28 to get that p \ -237 - 2266 - 377c. We use Cx = 
-iz - 56c - 260, Cy =y-28b + 586, = 566 + 4 to get that p \ 15027 - 48446 - 6328c. Putting 
these three conditions together, we get that p \ 618889059855, and then factoring yields that p = 3, 
5, 11, 17, 113, 787, or 827. 

Using the condition 6=1 (mod 4),c = (mod 4), we get that 2'^\\di, 2^\\d2, 2^11^3, 2^ ||A6,c, so 
we can ignore powers of two when taking the square root. 

Note that if for some choice of b,c, p\ Ab^c, then p \ Ab'^c' for any 6', c' = b,c (mod p). Therefore, 
we can know which pairs (6, c) have no rational primes dividing (A{,,c) by simply checking if p | (A^^c) 
for < 6,c < p with p = 3,5, 11, 17,31, 113,787,827 (see bc_search.txt in [CFCTL]). '□ 



Therefore, by avoiding the above values, we can easily chose congruence conditions on 6, c which 
will guarantee that no rational prime divides did2d^d/i, and hence IT (£'[4]) n K'^^'^ = K{i). We 
choose (6, c) to be congruent to (2, 1) (mod 3), (2,4) (mod 5), (6,4) (mod 11), (0,0) (mod 17), and 
(10,29) (mod 31). 



3.4. A family with maximal £-adic image. The tests for the remaining conditions can be easily 
modified into congruence conditions, as they all involve finding primes p oi K such that Ok /P and E 
(mod p) satisfy certain properties, all of which do not change if we fix the values of 6, c (mod pnZ). 
We will simply state the primes used, as the calculations are analogous to those in Section [L2l 

Proposition 3.4. Let 60 = 17, cq = 4. If b,c= 60, cq (mod 3 • 5 • 11 • 29 • 47), E^^c has maximal mod 
4 image, and E^^c is semi-stable, then E^^c ho-s maximal £-adic image for all i. 

Proof. For a prime p, let Ep denote -E6o,co (mod p). First, we use the prime p = (a^ + a + 2) and 
compute that #Ep{K/p) = 2^. Therefore -Efeg.co) mod i representation is surjective for ^ 7^ 2, 31. 
Since p CiZ = (3), this shows that if 6, c = 60, cq (mod 3), then the same holds for E^^c- 

To show that the mod 8 representation is maximal for -Efeo,co) consider the prime p = (3a^ + 2). 
As p n Z = 29, the same is true for any curve with 6, c = 60, cq (mod 29). 

To show that the mod 9 representation is surjective for EbQ^co-, we use the prime p = (2a^ + a + 4), 
which lies above 47. If 6, c = 60, cq (mod 47), the mod 9 representation is surjective for E^^c- 

Lastly, we must show that the mod 31 representation is surjective for E^q^co- We let wi,W2,W3 
be primes such that wi \ (— 5a^ + a — 3), W2 \ (5), and \ (a^ + a + 2). Since wiCiZ = 11, W2nZ = 
5, n Z = 3, we have that if 6, c = 60, cq (mod 3 • 5 • 11), the mod 31 representation is surjective. 

Putting this together, we get, just as in the previous section, that the image of the mod £ 
representation is maximal for all i. □ 



3.5. Proof of Theorem [Sl We have already developed congruence conditions for each condition. 
We gather them together here. For convenience, we use the notation n,p to refer to the mod p 
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congruence condition in Proposition 13.31 



Condition 


b 


c 


semistable 


5 (mod 12) 


4 (mod 12) 


mod 9 


17 (mod 47) 


4 (mod 47) 


mod 4 


3699 (mod 7 • 13 • 31) 


4183 (mod 7 • 13 • 31) 


mod 31 


17 (mod 3- 5- 11) 


4 (mod 3 • 5 • 11) 


mod 8 


17 (mod 29) 


4 (mod 29) 


£-adic 


2 (mod 3) 


1 (mod 3) 


n, 3 


2 (mod 3) 


1 (mod 6) 


n,5 


2 (mod 5) 


4 (mod 5) 


n,ii 


6 (mod 11) 


4 (mod 11) 


n,i7 


(mod 17) 


(mod 17) 


n,3i 


10 (mod 31) 


29 (mod 31) 


n,787 


(mod 787) 


(mod 787) 


n,827 


(mod 827) 


(mod 827) 



Using the Chinese remainder theorem, we put these together to get the congruence condition from 
the statement of the theorem. This completes the proof of Theorem [3j 

4. Non-Semistable Elliptic Curves and Nontrivial Narrow Class Group 

Here we show how to extend Greicius's test for the surjectivity of the mod £ representation to 
arbitrary ehiptic curves E with non-integral j£;-invariant over arbitrary cubic number fields K. In 
particular, we do not need to suppose that the elliptic curve E is semistable over K. 

To fix notation, we let 'Ek denote the set of primes of K for a number field K. We let Se ^ '^k 
be the set of primes of bad reduction of the elliptic curve E/K, and we let be the set of primes 
above the rational prime £. For a prime v G Sx, we let ly C Gk denote the inertia subgroup at 
V. If u; is a prime lying over v, we denote by f{'w/v),e{w/v) the residue degree and ramification 
index of w over v, respectively. If a Galois extension is unramifed at v, we denote by Frob^ the 
Frobenius element of v in the Galois group of that extension. We let Uy denote the v-adic units, 
Oy the completion of Ok at v, and rrit, the maximal ideal of Oy. We let Uk denote the group of 
units of Ok, and we let denote the subgroup of totally positive units. For a modulus m, in 
the sense of class field theory, we let Um,i = Uk H i^m,!- All of this notation is identical to that of 
[GrelOj where applicable. 

By a half-Borel subgroup of GL2(Ff) we mean a subgroup stabilizing a subspace of and 
acting trivially on either the subspace or the quotient by it. In other words, some conjugate of the 
subgroup lies in the set of matrices of the form 




Remark. Throughout this section, words such as "larger," "smaller," and "bounded" are used in 
the sense of divisibility rather than absolute value. 

To begin, we recall some useful results from [GrelOj . In [GrelOj Lemma 3.4], Greicius summarizes 
some results from [Ser72] on the inertia representation for the case of semistable elliptic curves. We 
restate these results, but note that most of the results only depend on the curve being semistable 
at a particular prime. 

Lemma 4.1 ( [Ser72j ). Let K he a number field, i a rational prime, and E/K an elliptic curve 
with j -invariant Je- Fix v £ T,k and w G 'Sj^ with w \ v. 
First, suppose v ^ Se- 
(i) If V ^ Si, then pE,i{Iw) is trivial. 
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Suppose for the next two that i is unramified in K . 

(ii) If V £ Si, and E has ordinary reduction at v, then the image of is contained in a Borel 

subgroup, and acts via the trivial character and via a character of order p — 1. 
(Hi) If V £ Si, and E has supersingular reduction at v, then the image of 1^ is a non-split Cartan 
subgroup. 

Suppose, furthermore, that E is semistable at v. 

(iv) If V £ Se \ Si, then PE,eiIw) is trivial or cyclic of order L 

(v) If V £ Se, ^\ i^Ue), then pE,i{Iw) contains an element of order i. 

(vi) If V £ Si and £ is unramified in K, then pE,i{Iw) is a half Borel subgroup. 

Proof. Assume first that i is not ramified in K. Everything except ^ and (jml) are stated in [GrelOt 
Lemma 3.4]. The remaining two follow from the content of |Ser72l Section 1.11]. 

If £ is ramified in K, ([ij) follows from the Criterion of Neron-Ogg-Shafarevich, and (Irvl) follows 
by examining the Tate curve as in |Ser981 IV. A. 1.5]. □ 

As in |iGrelO| . we have the following: 

Proposition 4.2. Suppose E/K is an elliptic curve with j-invariant Je, and suppose £ is a prime 
that does not ramify in K such that £ \ v{jE) for some place v of multiplicative reduction. If 
Pe/XGk) 7^ GL2(F^), then Pe/XGk) is contained in a Borel subgroup o/GL2(F^). 

Proof. By Lemma l4JJjvj) , we know that the mod £ image contains an element of order £. It thus 
must either contain SL2(F^) or be contained in a Borel subgroup (see ^Ser98j . IV. 3. 2, Lemma 2). 
As £ does not ramify in K, the intersection of K with Q(/i£cx)) is Q as £ does not ramify in K, so 
the determinant modulo £ is surjective. Therefore, in the former case, the image is GL2(F^). □ 

Remark. In practice, we find elliptic curves with one v such that f (j's) = —1; so that v works for 
all £. However, one can extend the result to other elliptic curves, if necessary by checking explicitly 
other £ using Proposition I2.12[ Also note that ii £ ^ 2,3 (or just £ ^ 2 ii E has full 2-torsion 
over K), we only need v to be potentially multiplicative, since, as we will see below, E becomes 
semistable over an extension of degree divisible only by the primes 2 and 3. 

Assuming £ f v{jE) for v multiplicative, let us suppose that the mod £ representation is not 
surjective. It follows that the representation pE/ takes the form 



in some basis of E[£], where xi; X2 are characters from Gk into F^ . Note that the Borel subgroup 
and hence the characters depend purely on the 1-dimensional vector subspace of E[£] left invariant 
by that subgroup. We call these the isogeny characters relative to that subspace. 

In fact, the pair of isogeny characters is independent of which subspace we choose. Although we 
will not truly need this fact until Lemma 14.101 we prove it now. 

Lemma 4.3. The set of isogeny characters {xi)X2} is independent of the basis for our Borel 
subgroup. 

Proof. We can view E[£] as a module over the ring R := FilGx] via the representation. If the 
image is contained in a Borel subgroup, then it is reducible, i.e. there is some subspace W C E[£] 
which is an i?-submodule of E[£]. The i?-modules W and E[£]/W correspond to the characters 
Xi- But if W' is a different submodule, then the set of i?-modules {W, E[£]/W} equals the set 
{VF', £'[£]/ VF'} by the Jordan-Holder theorem. It follows that the characters, and in particular, 
whether they ramify at a given prime of K, are independent of W. □ 
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In |GrelO| . Greicius shows that in the situation above, if E is semistable, and K satisfies certain 
technical properties, then one of these isogeny characters is unramified. In that case, because the 
narrow class group of K is trivial, that character is trivial. Greicius uses this to show that i divides 
the number of points modulo any prime of good reduction. 

As stated earlier, we would like to extend his results ruling out all but finitely many £ to non- 
semistable curves and more general K. In order to do this, we would like to analyze how much the 
two characters Xi)X2 can ramify. 

First, we briefly note what happens at semistable primes not dividing i. 

Lemma 4.4. Suppose that pi: Gk Gh{E[i]) is contained in a Borel subgroup. Then the isogeny 
characters are unramified at any v ^ Si at which E has semistable reduction. 

Proof. If E has good reduction at v, then pi itself is unramified. If E has multiplicative reduction 
at f , we know by Lemma 14.11 that the image of 1^ has order dividing £. As the characters have 
codomain which has order — 1, the characters are trivial on /„. □ 

4.1. Non-semistability. Next, we would like to tackle the primes at which E is not semistable. 
We will only cover those primes not dividing ^, then assume at the end that £ \s a. rational prime 
not lying under any prime of additive reduction. 

We say that an elliptic curve E/K is Legendre over if is isomorphic over K to a curve in 
Legendre form = x{x — l)(x — A). If the elliptic curve y"^ = f{x), where / is a cubic polynomial 
over K, has full 2-torsion over K, then we can write the equation in the form 

= (x — a){x — b){x — c) 

with a,b,c G K. Over K, the curve can be written in Legendre form, but that does not mean 
that the curve is Legendre over K. More precisely, we have the following well known fact (see 
Proposition III. 1.7 in (SlIn9] V 

Lemma 4.5. // E/K is an elliptic curve defined by equation y^ = (x — ei)(x — 62) (x — 63) over 
K (which happens if E has full 2-torsion over K), then E is Legendre over L = K{^\/e\ — 62). (By 
symmetry, this means we can take L = K{^ei — ej) for some i 7^ j.) 

In order to deal with non-semistability, we would like to know over what field the curve becomes 
semistable. A general result says that this is true for an abelian variety if we adjoin the 12-torsion. 
However, in the case of elliptic curves, we have the following lemma 

Lemma 4.6. Suppose E/K is an elliptic curve with full 2-torsion over K and additive reduction 
at V G Tjk- Then: 

• If E has potentially good reduction at v, then there is an extension L/K of ramification 
index at most 2 over which E has good reduction. 

• If E has potentially multiplicative reduction at v, then there is an extension L/K of rami- 
fication index at most 4 over which E has multiplicative reduction. 

Furthermore, suppose E is Legendre over L/K. Lf v does not ramify in L, then the above indices 
are 1 and 2, respectively. 

Proof. By the proof of Proposition 5.4 in |Sil091 Chapter VII], a Legendre curve has good reduction 
at all primes of potentially good reduction, and otherwise has multiplicative reduction at v after 
adjoining the square root of a uniformizer at v. Finally, a curve with full 2-torsion becomes Legendre 
over an at most quadratic extension oi K. □ 

We know that over some extension L/K, one of the characters is trivial. Therefore, we could 
count the points over the residue fields of L and take the greatest common divisor of these values. 
We should note first that computing in number fields is ineffective and impractical. Therefore, it 
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makes more sense to compute [L : K] and then take the unique finite field of that degree (over the 
residue field of K), then compute the number of points of our elliptic curve over that finite field. 

In order to trivialize one of the characters, one could take a field over which E is semistable. 
Over this extension and under the conditions above, one of our characters would be unramified 
at every finite prime not dividing i. It would follow that that character becomes trivial over the 
narrow Hilbert class field of this extension. However, the analysis of primes dividing i does not 
work over this field, which means that we must find a different method. 

We put bounds on the ramification of non-semistable primes at each of these characters. Then, 
since the extensions defined by the characters are abelian, they have conductors by class field theory, 
and we can use these bounds on the ramification indices to control the conductor of this extension. 
Therefore, assuming one of the characters is unramified at all primes of semistable reduction, the 
character is trivialized over the ray class field associated to this conductor. 

One advantage is that the splitting of primes in the ray class field is described explicitly by the 
Artin reciprocity law, so we can actually bound the order of the image of the Frobenius element 
under the character. Note that Magma can compute the order of a given ideal in the ray class 
group, so this method can be easily implemented. Finally, note that once we fix the field K, the 
computation of the ray class group for different moduli m is very easy by the exact sequence 

the only difficult part being computing the narrow class group. Conversely, the method outlined 
above involves computing an ideal class group that depends on the modulus and hence on the elliptic 
curve. Therefore, if one is working with many elliptic curves over the same field, our method works 
much better. 

We suppose for simplicity from now on that 2 does not ramify in K. We also suppose for the 
next two sections that the mod I representation is contained in some (fixed) Borel subgroup, hence 
has isogeny characters Xi foi" ^ = 1)2. 

4.2. Curves with full 2-torsion. 

Lemma 4.7. Let E/K have full 2-torsion over K . Suppose v ^ Si. Then the following are true 

(1) If V ^ 5*2, each character Xi is not wildly ramified at v, and if v £ S2, each character is 
ramified of index dividing 4. 

(2) If V G 5*2 does not ramify in an extension over which E is Legendre, or is of potentially 
good reduction, the index is 2 (or 1 if both happen). 

Proof. By Lemma 14.41 we know that if E has semistable reduction at v, then both characters are 
unramified at v. 

By Lemma 14.61 the curve becomes semistable at v over an extension of degree 4 obtained by 
first putting the curve in Legendre form (which happens over some quadratic extension) and then 
adjoining the square root of a uniformizer at v. If it is potentially good at v, this happens after 
obtaining Legendre form. Over this extension, E is semistable at v, so both of the isogeny characters 
are unramified at v by Lemma 14.41 li v \ 2, this means that the extension is not wildly ramified at 
V. If V I 2, the above follows immediately from the description of the field over which E becomes 
semistable at v in Lemma 14.61 □ 

We recall that for a place v and an abelian extension L/K, there is a "conductor" of the extension 
at V, which is the smallest power m^' of m^,, the maximal ideal at v, such that 1 + mj is in the kernel 
of the local Artin map. The conductor of a character Xi is the conductor of the extension defined 
by Xi- The global conductor is the product of the local conductors. An abelian extension of given 
global conductor is contained in the ray class field associated to that conductor, and a character 
with that global conductor is trivial over that ray class field. We say that the conductor oi L/K 
outside a set S C Tjj^ is the product of the local conductors at all v ^ S. 
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Proposition 4.8. Suppose E is Legendre over L/K . For v S 5*2, let r{v) = 3ifv ramifies in L or 
E has potentially multiplicative reduction at v, otherwise. Let s{v) = 1 if f{v/2) = 1, v ramifies 
in L, and E has potentially multiplicative reduction at v, and otherwise. Then let 



i{v) :-- 



if E is semistable at v, 

if E has additive potentially good reduction at v, 
V does not ramify in L, and v \2, 

1 if E has additive reduction at v and v \ 2 otherwise. 
r{v) + s{v) otherwise. 

Then if we let mf = HtjeSj^ ^^^^^ ^'^^ ^ product o/mj with all real places, the conductor of the 
extension defined by Xi is at most m outside Si. 

Proof. Lemma 14.71 gives us bounds on the ramification of tlie extension defined by the characters. 
We need only translate these into bounds on the conductor of the extension. 

As mentioned, the extension is unramified at any primes of semistable reduction. We also know 
the extension is unramified at v ii v does not ramify in L and is potentially good. Furthermore, 
as the index is a power of 2, it is tamely ramified at all primes other than 2. This means that the 
conductor has exponent at most 1 at that prime. 

In the case of v | 2, we use the description of the local Artin map to compute the conductor. The 
image of under the local Artin map is the inertia group at v in the extension, and we know that 
this image is of order bounded by 4 (respectively, 2), so its kernel has index at most 4 (respectively, 
2). We thus wish to classify subgroups of of index at most 4 or 2. Since 2 is not ramified in K, 
the v-adic exponential converges for < 1/2, meaning that 1 +xn^Ov, is isomorphic to Oy as a 
topological group. This latter is pro-cyclic, hence has a unique open subgroup of given index. If 
the index is at most 4, and f{v/2) > 1, then (1 + m^C'i,)/(l + m^O^) has order at least 4, so this 
kernel contains 1 +m'},Ov, and the conductor is at most at t;. 

In the case that the index is only bounded by 4 (by the previous proposition), and f{y/2) = 1, 
then (1 + m^Ot,)/(l + m^O^) has order 4, so the conductor is bounded by at v. □ 

Remark. If one does not wish to compute L above, one can always suppose that v ramifies in L. 
Then r{v) is always 3, and s{v) = 1 if v{i) < and f{v/2) = 1, and s{v) = otherwise. This is 
what we did in our calculations. However, we included the most general result for completeness, 
and because it may reduce the computation time for much larger fields. 

4.3. General curves. We now do not assume the curve has full 2-torsion in order to apply our 
results to the search for curves whose adelic representation is surjective. Once again, we suppose 
from now on for simplicity that 3 does not ramify in K. 

We know that after passing to a degree 6 extension, the curve has full 2-torsion. It follows that, 
after passing to an extension of degree at most 24, our curve becomes semistable. We therefore get 
the same bounds for ramification indices as in Lemma 14.71 but we must multiply each of them by 
6. We translate these into bounds on the conductor of the character: 

Proposition 4.9. For v € 5*2, let r{v) = 2 if E has potentially good reduction at v and r(v) = 3 if 
E has potentially multiplicative reduction at v. 

if E is semistable at v, 

1 if E has additive reduction at v and v \ 6, 

2 if E has additive reduction at v and v £ S3, 



i{v) :-- 



2 + 



r{v) 



if E has additive reduction at v and v £ S2. 



Then if we let mf = YIvgSk '^^'^ ^ product o/m/ with all real primes, then the conductor 
of the extension defined by Xi is at most m outside Si. 



18 



DAVID CORWIN, TONY FENG, ZANE KUN LI, SARAH TREBAT-LEDER 



Proof. Once again, if E is semistable at v, there is no ramification. If w f 6, then the ramification 
is not wild at v, so the conductor has power at most 1 at v. 

As for V I 3, the v-adic logarithm shows that 1 + m^O^ = 0„ as topological groups (assuming 
that 3 does not ramify in K), so the kernel of the character must contain 1 + m^Ov. 

Finally, if f | 2, then (assuming 2 does not ramify in K), the group 1 + xn^Oy is pro-cyclic, 
and (1 + m^Oy)/{l + m'^'^^Oy) has order f{v/2), so the exponent of the conductor is at most 
2 + \r{v)/ f{v/2)'] if the 2-part of the ramification index is at most 2^^'"\ The values of r{v) follow 
from the values from the previous section, but with ramification indices multiplied by 6. □ 

4.4. Cubic Fields. Next, we deal with v G Si. In |GrelOj . Greicius uses Corollary 3.6 to analyze 
this case. This relies on the fact that K = Q(a), a^ + a + l = 0, qGM has trivial narrow class 
group and the fact that there exists a totally positive unit u of K such that u — 1 is also a unit. 
To extend his result, we prove the following proposition for general cubic fields: 

Lemma 4.10. Let E/K he an elliptic curve over a cubic field K , and let i satisfy the conditions 
of Proposition \4-^ and not lie below any primes of additive reduction for E. Let u be a positive 
fundamental unit of K. Let k be the smallest positive power of u contained in [7^,1 • Let d := 
denote the order of the narrow class group of K. Let r := ^{Ox/^f)^ , where m is defined as 
above, depending on whether E has full 2-torsion over K . Suppose that 

(dr/k \ 

Then one of the characters Xi is unramified at every semistable v £ Se- 

Proof. We divide our argument into cases based on the splitting oi i in K. 

Case 1: i is inert. Then there is a unique place v of K above i. As the image of pe contains 
an element of order i, the image cannot be contained in a non-split Cartan subgroup, so E has 
ordinary or bad reduction at v by Lemma I4.1l1iiil) . In each case. Lemma l4. II tells us that the image 
of inertia is a half-split Cartan subgroup or a half-Borel subgroup, implying that the character is 
unramified at v. 

Case 2: £ splits completely. Suppose {£) = pqx. By the previous case, we see that each prime 
above i is unramified at at least one of the characters. By the pigeonhole principle, one of the 
characters, say Xii is unramified at at least two of the primes above i. Suppose without loss of 
generality that it is unramified at q and r, and suppose it is ramified at p. 

As = i — 1, which is prime to p, the character Xi is not wildly ramified at p. Its conductor 
is therefore at most mp, by either Proposition 14.81 or Proposition 14.91 respectively. It follows that 
Xi factors through the ray class field L^p, i.e. it factors through under the Artin map. Now, 
we have an exact sequence 

Suppose that Xi is ramified at p. By the hypothesis, u*'^ — 1 is prime to £, hence not divisible 
by nx/p, for all ik < dr. For i such that k ] i < dr, we know that — 1 is not divisible by tn/p. 
Therefore, we know that u has order greater than dr in U^/Ump,i, and the same is true of its image 
in (Oi^/mp)^. Now, (O^/m/p)^ = (O/^/nx/)^ x (Ok/p)^ as £ does not lie below any primes of 
additive reduction, hence any primes dividing m. This means that 

#(0^/m/p)^ =£r. 

As u has order greater than dr, the cokernel of 

C/,^/f/mp,i^(Oi^/m/p)^ 

has order less than £/d. 
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Let V denote this cokernel. By our exact sequence above, V is also equal to the kernel of the 
surjection . Then V has index d = in C^. Since Xi ■ — )• is surjective, 

the image of P in has index at most d, hence is of order at least l/d. But we have already 
shown that V has order less than £/d, so it cannot surject onto a group of order at least £/d. This 
contradiction shows that Xi cannot be ramified at p. 

Case 3: i splits as pq where f{p/i) = 1- Then one of the characters is unramified at q, so we 
apply the same argument with that character at p to show that it cannot be ramified at p. 

This completes the proof. □ 

Remark. If = Q, the lemma is automatically true because only Case 1 can occur. 

We now combine our results into the following. 

Theorem 4.11. Let E/K he an elliptic curve over a cubic field K not Galois over Q. If E has 
full 2-torsion over K , let m he as in Proposition ^.^ and otherwise, let m he as in Proposition^^ 
Let £ he a prime of Q such that: 

(1) I does not ramify in K 

(2) There is a prime v at which E has semistable reduction and such that t\ v{jE) < 

(3) £ does not lie helow any primes of K at which E is not semistahle 

(4) We have that 



where d := #C^, r := ^{Ok /^f)^ , u is a positive fundamental unit of K, and k is the 
order of u in U^/Um,i 

If Pi{Gk) $i GIj2{¥£), then one of the characters Xi is trivial over the ray class field L^ of K of 
conductor m. 

Proof. By Proposition l4.2| the first two conditions on £ imply that the characters exist. Proposition 
14.81 or Proposition 14. 9| respectively, shows that character has conductor m outside of 5"^. The third 
condition means that E is semistable at all of Si, so Lemma [4.101 implies that one of the characters 
Xi is unramified at all of Si. As it is unramified at Si, we know that m is its conductor, and thus 
it is trivial over L^- □ 

Corollary 4.12. Let m, E/K , and £ he as ahove, and let n he the order ofv in #C^, where v \ m is a 
prime of good reduction. Let ly he the unique degree n extension ofky. Then if Pe,i{Gk) / GL2(F^), 
we have £ \ ^Ey[ly) (equivalently, the reduced curve has an £-torsion point). 

Proof. This argument follows |Grel01 Proposition 3.8] almost identically. □ 

Remark. Note that this is also true if we replace n by one of its multiples, since then we only get a 
larger ly. In particular, if we do not wish to compute the order of v in the ray class group, we can 
just let n always equal #C^. 

This gives us an efficient way to test for surjective image. In searching for examples, we restricted 
our attention to those E with multiplicative reduction at a prime v such that v{jE) = — 1- For the 
other £, we use Proposition 12 . 1 2l 

Remark. We can replace ^ in each criterion with v potentially multiplicative, as explained in 
Remark SI Therefore, in most generality, our method extends to arbitrary elliptic curves with 
non-integral j-invariant over arbitrary cubic (and quadratic) fields K. 
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4.5. Further examples. In this section we briefly mention two examples that result from our 
theory developed above. These examples were found using Theorem 14.111 and Corollary 14.121 and 
methods similar to Section 3.4 of [GrelOj and Example 11.21 Due to the similarities, we content 
ourselves with just briefly mentioning the proof. 

We first give an example of a non-Galois cubic field K and an elliptic curve E/K with full 
2-torsion over K which has maximal adelic Galois image, but is not semistable. 

4.5.1. Proof of Example \1.4\ Let /3 be the unique real root of + 4a;^ + 7x — 4 and K = Q(/3). 
We want to show that the adelic representation pE associated to the elliptic curve 

E/K: y2 = ^(x + (10/3^ - 3))(x - (/? + 4)) 

surjects onto Vi(2) x J^^^g GL2(Z£). 

Let H := pe{Gk)- Note that the discriminant of K is —503, + 9/3 — 5 is a totally positive 
unit of K, and m/ = ((3/2)/32 + (13/2)/3 + 13)^ In condition (4) of Theorem STD we will be 
inefficient and take k = 1. Conditions (1), (3), and (4) of Theorem 14.111 imply that H{£) = GL2(F^) 
for £ / 2, 5, 17, 41, 73, 211, 503, 2143, 2269, 3907, 5449, 31741, 40471, 493333, 938251, 1225603, 
1315849, 37012153. To show that H{i) = GL2(Ff) for these remaining i ^ 2, we use Proposition 
12.121 Then proceeding as in Example 11.21 shows that pE surjects onto 1^1(2) x n£>2 GL2(Z^). (See 
nonsemi_magma.txt and nonsemi_sage . sws in [ CFLTLj for results of computations.) □ 

We end by noting that the methods we developed in Section |4] can also be used to consider the 
case of surjective pE when the narrow class group is nontrivial. We offer the following example. 

4.5.2. Proof of Example \1.5[ Let /3 be the unique real root of x^ + 8x^ — 3x + 1 and K = Q(/3). 
We show that with 

E/K : y"^ + xy + I3y = x^ - 8x'^ - 6x - 1 

the corresponding pE surjects onto GL2(Z). 

Again as above, let H := pe{Gk)- We note that Q(/3) has discriminant —1823 and narrow class 
group being C2. Also note that — /? is a totally positive unit and ^K/'Q_{{~f^ ~ ~ 1)) = 7^ ' H- 
The conditions given in Theorem 14.111 give that H{t) = GL2(F£) for £ 7^ 7, 11, 1823. For these three 
£, we can use Proposition 12.121 Then using similar methods as in Section 3.4 of [GrelO] shows 
that the adelic Galois representation surjects onto GL2(Z). (See nontriv_narrow_magma.txt and 
nontriv_narrow_sage . sws in |CFLTL] for results of computations.) □ 

5. Remarks on higher torsion 

Although we initially raised the problem of explicitly computing Galois representations for elliptic 
curves with arbitrary specified torsion data, we have primarily worked with 2-torsion in this paper. 
After all, it is significantly easier to produce examples of elliptic curves with 2-torsion, and to 
work with explicit formulas for the 2-division-polynomials. This is advantageous, for example, in 
verifying that the "mod 4" Galois representation is maximal (i.e. [iC(£'[4]) : K] = 16), and in 
producing the appropriate congruence conditions in Section [3] 

However, many of our methods can be applied to elliptic curves with more general torsion, as 
we now demonstrate. We will be content to give a discussion of examples, rather than attempting 
to write out fully general results. 

As we have observed, torsion data for E/K amounts to giving some restrictions on the "mod 
^k^^ representation 

P^,,..(Ga') cGL2(Z/f'=Z). 

We are interested in knowing when the adelic Galois representation is maximal given such a re- 
striction. One has to take different steps to verify that the £-adic Galois representation is maximal, 
and also account for a different abelianization map. The latter is equivalent to computing the 
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commutator subgroup of the desired £-adic image, which is reduced to a finite computation by the 
refinement lemmas. 

Likewise, one verifies that the £-adic image is maximal by checking that the "mod image 
is maximal and that the image of the Galois representation also contains the entire kernel of the 
reduction map PE,£k+i{GK) — ^ Pe,£'^{Gk)- The first matter depends on the particular nature of 
the torsion data given; for instance, we consider the case of full ^-torsion over in which case 
there is nothing to check, but if there is just one cycle of ^-torsion points then one is looking for a 
"half-Borel" subgroup. We will not discuss the various cases, but instead focus on the problem of 
passing from finite to infinite: assuming that Pe,i'^{Gk) is known, how may we check that pE/°° 
is the pre-image of pEik{GK) under the reduction mod map? In the paper, we simply used 
the four-division polynomials for E, but this is infeasible for large I, so we indicate a method by 
analyzing Probenius elements. Note that the Chebotarev Density Theorem certainly implies that 
if the £-adic Galois representation is maximal as desired, then a positive density of such elements 
must exist. 

We illustrate by considering a particular example. Suppose E/K has exactly one ^-torsion cycle 
for some prime i > 2. Suppose we want to show that Pe/°={Gk) is the full pre-image of the 
half-Borel subgroup 

By Serre's refinement lemma, it suffices to show that this half-Borel is in fact the mod H. image, 
and to show that PE/^iGq) D I + 2Mat2x2(^/^^)- To address the first question, we see that the 
mod £ image must be the half-Borel or the half-Cartan: 

1 A /I 



n / or in 

0*1 Y * 

Now, suppose a = Frobp is found whose action on the ^-torsion points has characteristic poly- 
nomial factoring as 

-apT + p={T- if (mod £). 

We would like to know whether or not a is contained in the half split-Cartan subgroup. Since 
{pE/{cr) — if = (mod i), if it is contained in the half split-Cartan then a = I + iM for some 
M £ GL2(Zf). The characteristic polynomial of M is then 



£2 

In particular, i'^ \ 1 + p — ap. So if this ever fails, we know that pE/ was not contained in the split 
Cart an. 

We now address the second question, which is a generalization of the arguments in |LT76j . p. 
56-57. This group / -|- 2Mat2x2(^/^^) is an abelian group isomorphic to (Z/£Z)^; we must obtain 
four independent elements. 

We recall the following fact: if the characteristic polynomial of a 2 x 2 matrix with coefficients 
in Zi factors with distinct roots when considered modulo i, then it is diagonalizable over Z^. Note 
that it is not sufficient for the roots to be distinct modulo (indeed, the polynomial may very 
well have four roots in Z/^^Z). 

Step One. It is easy to obtain diagonalizable, non-scalar elements. As outlined in the paper, we 
may compute the characteristic polynomial of a Frobenius element at a = Frobp: 

- apT + p, 

where ap = p + 1 — #E{¥p). Suppose this polynomial factors mod i'^ as a product of two linear 
polynomials with distinct roots Ai,A2 such that Ai ^ A2 (modi). Then pE/°° {FTohp) may be 
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diagonalized over Z^, so it will have the form 

'Ai + l^x-i 



A2 + (i^X2 j ■ 
for some x\,X2 € Z^. Raising to the — Vf^ power yields 



^^-1 = i+i[ ) (mod e). 



(The point is that ^ = 1 (mod £), so we may legitimately do this division). As long as A( ^ ^ 
A2~^ (mod Ip'), this matrix is guaranteed to be diagonal but not scalar. 

Remark. This can only fail if the image of Galois mod i is trivial, since this only fails to occur 
when the image is contained in the normalizer of a non-split Cartan. This is impossible under our 
torsion assumptions. On the other hand, the image mod ^ is trivial only for small in particular 
^ = 2 for if = Q. 

Step Two. Next, suppose that a Probenius element a is found with characteristic polynomial as 

above, but such that A^~"^ = \^^^ (mod (^). Then wc arc guaranteed that a^~^ is a scalar matrix. 
Adopting the basis with respect to which the matrix from the previous part is diagonal, we see 
that in this basis we would have all diagonal matrices. (The point is that we have no way of 
telling in which bases the diagonal matrices obtainable in (1) are diagonalizable. However, scalar 
matrices are scalar in every basis! Wc cannot obtain scalar matrices by the method in (1) since 
their eigenvalues are obviously guaranteed not to be distinct modulo £.) 

Step Three. Now, suppose that we have produced a G peoa with a = I + £M, for some M G 
GL2(Z^). The characteristic polynomial of M is then 



^2 

and if this is irreducible (mod i) then wc know that a cannot be put into upper-triangular form 
in any basis. Adjusting by diagonal elements already obtained, we obtain an element of the form 

I + J) (mod£^) 

where 6, c 7^ 0. 

It remains to discuss how to produce such a sigma. Suppose a = Frobp is found with characteristic 
polynomial factoring as 

T^-apT + p={T- if (mod £). 

which implies that {a — if = (mod i). If a is congruent to the identity modulo £, then we know 

that a = I + IM. We test this in the example below by checking for full ^-torsion in ^'(F^). An 
alternative approach is to observe that must be congruent to the identity modulo £, and we can 
compute its characteristic polynomial from that of a (We have = Aa + B hy using the relation 
of the characteristic polynomial, and similarly obtain another linear relation for cr^^). 

Step Four. Finally, wc observe that we may conjugate any element of G by any other clement. 
We have already shown that we have all diagonal matrices, and the previous part guarantees a 
matrix of the form I + £{co) (mod £^). Conjugating this by ( J ° ) where u 7^ 1, we obtain 

u-^b 
uc 
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5.0.3. Proof of Example \1.6l To conclude, we carry out the program described above to give an 
example of an elliptic curve E/Q and Frobenius elements satisfying the above properties. Let 

E/Q ■.y'^ + xy + y = x^-x^- 19353x + 958713 

which has torsion subgroup Z/7Z. In this case, £ = 7. We compute that Step 1 above is satisfied 
by considering the Frobenius corresponding to 61, Step 2 is satisfied by considering the Frobenius 
corresponding to 971. We then note that the prime q = 127 is such that — UqT + q = {T — 1)^ 
(mod 7) and \ 1 + q — aq. Moreover, the prime p = 19993 is such that — OpT + p = (T — 1)^ 
(mod 7) and 49 I 1 + p - Op, - (op -2)/iT + {l+p- ay)ll^ is irreducible mod I and £;(Fi9993) 
has full 7-torsion. This implies that Step 3 is satisified. (See frob_find.txt in [CFLTLj for 
computations.) □ 
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